iBet uBet web content aggregator. Adding the entire web to your favor.
Link to original content: http://w3.org/TR/CSP1/
Copyright © 2010-2015 W3C® (MIT, ERCIM, Keio, Beihang). W3C liability, trademark and document use rules apply.
This document defines a policy language used to declare a set of content restrictions for a web resource, and a mechanism for transmitting the policy from a server to a client where the policy is enforced.
This section describes the status of this document at the time of its publication. Other documents may supersede this document. A list of current W3C publications and the latest revision of this technical report can be found in the W3C technical reports index at http://www.w3.org/TR/.
Work on this document has been discontinued. It should not be referenced or used as a basis for implementation. Work on the subject has continued in CSP Level 2. Please see that document for up-to date information.
This document describes a proposal that has been
discussed by the broader community since 2010 There are
experimental implementations in Firefox and Chrome, using the header
names X-Content-Security-Policy and
X-WebKit-CSP respectively. Internet Explorer 10 Platform
Preview also contains a partial implementation, using the header name
X-Content-Security-Policy.
In addition to the documents in the W3C Web Application Security working group, the work on this document is also informed by the work of the IETF websec working group, particularly that working group's requirements document: draft-hodges-websec-framework-reqs.
This document was published by the Web Application Security Working Group as a Note.
Publication as a Working Group Note does not imply endorsement by the W3C Membership. This is a draft document and may be updated, replaced or obsoleted by other documents at any time. It is inappropriate to cite this document as other than work in progress.
The (archived) public mailing list public-webappsec@w3.org (see instructions) is preferred for discussion of this specification. When sending e-mail, please put the text “CSP1” in the subject, preferably like this: “[CSP1] …summary of comment…”
This document was produced by a group operating under the 5 February 2004 W3C Patent Policy. W3C maintains a public list of any patent disclosures made in connection with the deliverables of the group; that page also includes instructions for disclosing a patent. An individual who has actual knowledge of a patent which the individual believes contains Essential Claim(s) must disclose the information in accordance with section 6 of the W3C Patent Policy.
This document is governed by the 1 August 2014 W3C Process Document.